Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/7b32f305-4389-4cc7-b146-c144a26b3f4c/333e46c8-8ff4-38b8-acdc-10662d117e63.roa
File:                     333e46c8-8ff4-38b8-acdc-10662d117e63.roa (raw, json)
Hash identifier:          QdnqhZ/2iLMVz7gw9ykfWazWNa+iLZS9PyuCDvIZY+s=
Subject key identifier:   BB:84:4B:6B:BD:61:4C:C4:1D:08:7C:A9:97:AE:37:46:85:66:A0:A8
Certificate issuer:       /CN=7b32f305-4389-4cc7-b146-c144a26b3f4c
Certificate serial:       010D0C9F4328584E31CF1A4EDA1051B950E580D1
Authority key identifier: 7C:1C:9F:00:4A:3C:F6:73:0C:CD:C1:FC:5C:23:A9:26:D1:59:EB:66
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/7b32f305-4389-4cc7-b146-c144a26b3f4c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/7b32f305-4389-4cc7-b146-c144a26b3f4c/333e46c8-8ff4-38b8-acdc-10662d117e63.roa
Signing time:             Tue 16 Jun 2026 21:00:12 +0000
ROA not before:           Tue 16 Jun 2026 21:00:12 +0000
ROA not after:            Mon 14 Sep 2026 21:00:12 +0000
asID:                     17253
IP address blocks:        2606:8000::/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/7b32f305-4389-4cc7-b146-c144a26b3f4c/7b32f305-4389-4cc7-b146-c144a26b3f4c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/7b32f305-4389-4cc7-b146-c144a26b3f4c/7b32f305-4389-4cc7-b146-c144a26b3f4c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/7b32f305-4389-4cc7-b146-c144a26b3f4c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 25 Jul 2026 16:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:31:cf:1a:4e:da:10:51:b9:50:e5:80:d1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7b32f305-4389-4cc7-b146-c144a26b3f4c
        Validity
            Not Before: Jun 16 21:00:12 2026 GMT
            Not After : Sep 14 21:00:12 2026 GMT
        Subject: CN=89a5b46e-9840-4ee0-ac14-bf5121a09d88
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:38:03:0f:f5:34:59:ec:36:b8:62:49:2b:06:
                    a8:54:70:fb:fa:28:97:06:5b:80:b2:2d:fd:4a:5d:
                    9f:91:6c:e3:78:d2:55:25:38:d6:c0:af:c9:04:d7:
                    e2:c3:2b:10:12:5f:99:8e:e0:c6:a9:ea:96:50:11:
                    97:ba:71:c2:f6:e0:bb:03:db:62:04:0b:13:d5:46:
                    dc:10:d8:f2:5e:88:63:c0:39:05:70:98:e8:e5:d0:
                    72:cd:4e:48:af:2f:1e:77:8b:95:a8:09:22:9e:25:
                    9f:b5:a5:6a:0f:79:2f:aa:1e:27:52:ca:d3:d4:da:
                    40:33:41:b0:c6:b6:a2:6f:ab:76:b6:72:09:1b:04:
                    71:4d:98:d4:d2:23:09:8c:6b:1a:90:0e:4d:57:13:
                    32:0b:31:a5:3f:1d:63:bb:b1:ab:42:fa:d8:7b:ff:
                    2e:ce:82:28:93:7a:ca:86:c8:0e:5e:28:9b:83:1d:
                    a4:96:e6:5b:4d:fc:50:fe:14:3e:63:7c:6a:ee:17:
                    ad:bf:63:c3:9a:4b:e4:4e:b8:78:8c:c2:b9:bf:b2:
                    07:0e:f9:3e:4f:a5:4d:3c:0e:73:4e:44:28:a3:23:
                    b3:1f:be:41:d3:d3:24:73:d6:2c:a3:f0:51:48:d3:
                    fc:01:ba:b4:33:e5:0a:2b:55:20:0c:b1:6a:c7:c5:
                    31:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BB:84:4B:6B:BD:61:4C:C4:1D:08:7C:A9:97:AE:37:46:85:66:A0:A8
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/7b32f305-4389-4cc7-b146-c144a26b3f4c/333e46c8-8ff4-38b8-acdc-10662d117e63.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/7b32f305-4389-4cc7-b146-c144a26b3f4c/7b32f305-4389-4cc7-b146-c144a26b3f4c.crl

            X509v3 Authority Key Identifier:
                keyid:7C:1C:9F:00:4A:3C:F6:73:0C:CD:C1:FC:5C:23:A9:26:D1:59:EB:66

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/7b32f305-4389-4cc7-b146-c144a26b3f4c.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2606:8000::/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         72:9a:90:a3:b4:39:86:31:ee:3b:f0:96:3a:98:57:86:fb:c8:
         05:3c:2a:f3:f1:d0:d0:2f:2d:96:68:89:d3:0b:ee:1e:b7:5b:
         fd:e0:cd:9a:7e:59:3b:d2:f6:5f:3f:39:72:35:5b:31:4e:b5:
         8f:c5:9b:f7:fd:eb:f1:ed:87:ed:6f:05:ff:8b:c9:ef:b0:f2:
         2a:b5:f2:fd:e7:88:bd:c2:75:dd:55:25:e6:b3:13:99:8b:9b:
         15:b0:34:68:f0:8a:1f:87:72:59:fc:2c:f0:68:f4:fc:f5:7e:
         67:5a:29:3f:62:88:15:e7:2a:c6:c0:fd:e0:8d:89:12:3e:3e:
         75:8b:89:71:6d:25:0e:cc:bd:cd:b2:24:48:7e:fb:d9:d6:51:
         db:b9:fd:32:33:ee:75:ef:a1:5a:6b:3e:8d:2a:72:6a:c4:4c:
         6e:1f:3d:2e:1d:0f:85:83:71:22:97:e6:20:37:fd:8c:4b:c2:
         2c:cf:58:a8:28:8c:e5:06:78:98:59:b6:13:83:0d:22:b5:70:
         6b:7b:1e:fd:ff:fb:c8:a4:b0:3f:8e:7b:ee:25:d1:72:8e:50:
         3c:7b:f8:e3:06:98:09:72:bd:34:a4:fb:d5:95:98:53:14:15:
         85:32:41:50:8b:04:79:a2:2d:4f:1a:b2:ed:ef:39:b8:27:4c:
         67:46:0a:6a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 15:53:08 2026 by rpki-client